monitor

Detect and block destructive commands, malicious packages, and secret exposure during agent operations.

3|Updated Jan 31, 2026
One-click install
npx skills add https://github.com/gwpjp/Web3-Claude --skill monitor
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: monitor
Source: https://github.com/gwpjp/Web3-Claude/tree/main/.claude/skills/monitor
Command: npx skills add https://github.com/gwpjp/Web3-Claude --skill monitor

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides a real-time safety monitor that watches agent operations to detect and block dangerous actions, such as destructive commands, malicious packages, and leakage of secrets.

Core Features & Use Cases

  • Detect destructive commands and risky operations in plan reviews, code changes, and execution steps and prompt immediate intervention.
  • Identify suspicious or tampered packages and credential or secret exposure, generating alerts and preventing execution.
  • Use cases include safeguarding automated workflows, during plan reviews, code review, and bash command execution by agents.

Quick Start

Invoke the safety monitor to review planned actions or recent activity before agents execute commands.

Frequently Asked Questions about monitor

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent agents from executing destructive bash commands?

You prevent destructive bash commands by applying real-time safety monitoring during plan review and execution. It uses explicit pattern matching to detect risky operations and prompts immediate intervention before the command runs.

What is the best way to detect secrets exposure during automated agent workflows?

The best way to detect secrets exposure is to use a real-time monitor that watches agent operations. It identifies credential leakage in code changes and execution steps, generating alerts and preventing the suspicious action from proceeding.

How do I block malicious packages during code reviews?

Block malicious packages by invoking a safety monitor to review planned actions before execution. It identifies suspicious or tampered packages through explicit pattern matching and stops the workflow before they can be installed.

Can I use this safety monitor to review agent workflows without installing dependencies?

Yes, you can use this safety monitor without installing dependencies. It operates as a standalone tool that applies explicit pattern matching to detect destructive patterns, suspicious packages, and secret exposure during agent operations.

Does real-time safety monitoring work during plan reviews?

Yes, real-time safety monitoring works during plan reviews. It detects risky operations and destructive commands in the planning phase, prompting immediate intervention before agents execute any dangerous actions.

Why might pattern matching not catch all destructive patterns in agent operations?

Pattern matching might not catch all destructive patterns because it relies on explicit detection rules. It identifies known dangerous commands, suspicious packages, and secrets exposure, but may not detect novel or obfuscated risky operations.